Loading vulnerability…
Privilege Escalation in UniFi Network Application
CVE-2026-55118 is a high-severity improper access control vulnerability in the UniFi Network Application. The flaw allows a malicious actor with network access and only low privileges, under certain conditions, to escalate privileges within the application. Available information identifies the weakness class as improper access control but does not provide public technical detail about the specific vulnerable component, function, or request path involved. The issue affects UniFi Network Application version 10.3.58 and earlier and is addressed in version 10.4.57 and later.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows privilege escalation within the UniFi Network Application. Because the published CVSS data indicates high impact to confidentiality, integrity, and availability, an attacker who gains elevated application privileges may be able to access protected data, modify application state or administrative settings, and disrupt normal operation of the application.
If you can’t patch tonight, do this now.
If immediate patching is not possible, restrict network access to the UniFi Network Application to trusted administrative networks and users only, minimize the number of low-privileged accounts that can reach the application, and audit existing user roles and permissions for unnecessary access. No interim vendor workaround is reported as available, so exposure reduction should be treated only as a temporary measure until patching is completed.
Patch, then assume compromise.
Upgrade the UniFi Network Application to version 10.4.57 or later. Apply the vendor-provided security update across all affected deployments and verify that instances are no longer running version 10.3.58 or earlier. Regularly review application privilege assignments as part of post-remediation validation.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
10 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.